Read the docs
TI-2022-12767 Aliases CVE-2022-30631GHSA-r654-8j96-crqx

Stack exhaustion when reading certain archives in compress/gzip

Priority LOW 37CWE-674Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Partial Red Hat: 33 fixed, 20 without a fix

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Red Hat. Impact type from CWE-674.

Summary

Uncontrolled recursion in Reader.Read in compress/gzip before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via an archive containing a large number of concatenated 0-length compressed files.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.02186 82nd percentileScored 2026-11-07
Fix Partial compress/gzip (Go standard library): 1.17.12, 1.18.4Red Hat: 53 advisoriesRed Hat: 33 fixed, 20 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Go standard librarycompress/gzipbefore 1.17.12; 1.18.0-0 to before 1.18.41.17.12, 1.18.4Patch availableCNA
  • compress/gzip VendorGo standard library Affected before 1.17.12; 1.18.0-0 to before 1.18.4 Fixed in 1.17.12, 1.18.4 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*before 1.17.12; 1.18.0 to before 1.18.4VulnerableGo standard library
  • cpe:2.3:a:golang:go:*:*:*:*:*:*:*:* Versions before 1.17.12; 1.18.0 to before 1.18.4 Vulnerable ·Go standard library

Remediation

  • Fix · CNA compress/gzip (Go standard library) Fixed in 1.17.12, 1.18.4

Red Hat 53 advisories

  • RHSA-2024:2180 Released 2024-04-30 · Red Hat rating Moderate
    runc security update
    • Red Hat Enterprise Linux AppStream (v. 9) runc-4:1.1.12-2.el9
  • RHSA-2023:3642 Released 2023-06-15 · Red Hat rating Important
    Red Hat Ceph Storage 6.1 Container security and bug fix update
    • Red Hat Ceph Storage 6.1 Tools rhceph/keepalived-rhel9, rhceph/rhceph-6-dashboard-rhel9, rhceph/rhceph-6-rhel9 +3
  • RHSA-2023:2802 Released 2023-05-16 · Red Hat rating Moderate
    container-tools:4.0 security and bug fix update
    • Red Hat Enterprise Linux AppStream (v. 8) aardvark-dns-2:1.0.1-37.module+el8.8.0+17954+9046de88.aarch64::container-tools:4.0, aardvark-dns-2:1.0.1-37.module+el8.8.0+17954+9046de88.ppc64le::container-tools:4.0, aardvark-dns-2:1.0.1-37.module+el8.8.0+17954+9046de88.s390x::container-tools:4.0 +47
Show 50 more Red Hat advisories
  • RHSA-2023:2758 Released 2023-05-16 · Red Hat rating Moderate
    container-tools:rhel8 security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream (v. 8) aardvark-dns-2:1.5.0-2.module+el8.8.0+18060+3f21f2cc.aarch64::container-tools:rhel8, aardvark-dns-2:1.5.0-2.module+el8.8.0+18060+3f21f2cc.ppc64le::container-tools:rhel8, aardvark-dns-2:1.5.0-2.module+el8.8.0+18060+3f21f2cc.s390x::container-tools:rhel8 +47
  • RHSA-2023:1529 Released 2023-03-30 · Red Hat rating Moderate
    Service Telemetry Framework 1.5 security update
    • Service Telemetry Framework 1.5 for RHEL 8 stf/sg-core-rhel8
  • RHSA-2023:1042 Released 2023-03-06 · Red Hat rating Moderate
    Custom Metrics Autoscaler Operator for Red Hat OpenShift (with security updates)
    • OpenShift Custom Metrics Autoscaler 2 custom-metrics-autoscaler-tech-preview/custom-metrics-autoscaler-adapter-rhel8, custom-metrics-autoscaler-tech-preview/custom-metrics-autoscaler-rhel8, custom-metrics-autoscaler-tech-preview/custom-metrics-autoscaler-rhel8-operator
  • RHSA-2023:0727 Released 2023-02-16 · Red Hat rating Moderate
    OpenShift Container Platform 4.12.3 security update
    • Red Hat OpenShift Container Platform 4.12 buildah-1:1.23.4-4.rhaos4.12.el8, buildah-1:1.23.4-4.rhaos4.12.el9, buildah-tests-1:1.23.4-4.rhaos4.12.el8 +45
  • RHSA-2023:0408 Released 2023-01-25 · Red Hat rating Important
    OpenShift Virtualization 4.12.0 Images security update
    • CNV 4.12 for RHEL 8 container-native-virtualization/hostpath-csi-driver, container-native-virtualization/hostpath-provisioner-rhel8, container-native-virtualization/hostpath-provisioner-rhel8-operator +9
  • RHSA-2023:0407 Released 2023-01-24 · Red Hat rating Moderate
    OpenShift Virtualization 4.12.0 RPMs security update
    • CNV 4.12 for RHEL 7 kubevirt-4.12.0-1057.el7, kubevirt-virtctl-4.12.0-1057.el7, kubevirt-virtctl-redistributable-4.12.0-1057.el7
    • CNV 4.12 for RHEL 8 kubevirt-4.12.0-1057.el8, kubevirt-virtctl-4.12.0-1057.el8, kubevirt-virtctl-redistributable-4.12.0-1057.el8
  • RHSA-2022:7398 Released 2023-01-17 · Red Hat rating Moderate
    OpenShift Container Platform 4.12.0 packages and security update
    • Ironic content for Red Hat OpenShift Container Platform 4.12 crudini-0.9.3-4.el9, future-0.18.2-9.el9.1, openstack-ironic-1:21.0.1-0.20221114235951.fe64d5e.el9 +47
    • Red Hat OpenShift Container Platform 4.12 NetworkManager-1:1.36.0-8.el8_6, NetworkManager-adsl-1:1.36.0-8.el8_6, NetworkManager-bluetooth-1:1.36.0-8.el8_6 +47
  • RHSA-2022:8250 Released 2022-11-15 · Red Hat rating Moderate
    grafana-pcp security update
    • Red Hat Enterprise Linux AppStream (v. 9) grafana-pcp-3.2.0-3.el9
  • RHSA-2022:8098 Released 2022-11-15 · Red Hat rating Moderate
    toolbox security and bug fix update
    • Red Hat Enterprise Linux AppStream (v. 9) toolbox-0.0.99.3-5.el9, toolbox-tests-0.0.99.3-5.el9
  • RHSA-2022:8057 Released 2022-11-15 · Red Hat rating Important
    grafana security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream (v. 9) grafana-7.5.15-3.el9
  • RHSA-2022:7648 Released 2022-11-08 · Red Hat rating Moderate
    grafana-pcp security update
    • Red Hat Enterprise Linux AppStream (v. 8) grafana-pcp-3.2.0-2.el8
  • RHSA-2022:7529 Released 2022-11-08 · Red Hat rating Moderate
    container-tools:3.0 security update
    • Red Hat Enterprise Linux AppStream (v. 8) buildah-1.19.9-6.module+el8.7.0+16212+65e1b35f.aarch64::container-tools:3.0, buildah-1.19.9-6.module+el8.7.0+16212+65e1b35f.ppc64le::container-tools:3.0, buildah-1.19.9-6.module+el8.7.0+16212+65e1b35f.s390x::container-tools:3.0 +47
  • RHSA-2022:7519 Released 2022-11-08 · Red Hat rating Moderate
    grafana security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream (v. 8) grafana-7.5.15-3.el8
  • RHSA-2022:6714 Released 2022-09-26 · Red Hat rating Moderate
    RHACS 3.72 enhancement and security update
    • RHACS 3.72 for RHEL 8 advanced-cluster-security/rhacs-docs-rhel8, advanced-cluster-security/rhacs-main-rhel8, advanced-cluster-security/rhacs-rhel8-operator +3
  • RHSA-2022:6560 Released 2022-09-26 · Red Hat rating Moderate
    Openshift Logging Bug Fix Release and Security Update (5.3.12)
    • OpenShift Logging 5.3 openshift-logging/log-file-metric-exporter-rhel8
  • RHSA-2022:6308 Released 2022-09-14 · Red Hat rating Important
    OpenShift Container Platform 4.8.49 security update
    • Red Hat OpenShift Container Platform 4.8 openshift4/egress-router-cni-rhel8, openshift4/network-tools-rhel8, openshift4/ose-aws-ebs-csi-driver-rhel8 +47
  • RHSA-2022:6517 Released 2022-09-14 · Red Hat rating Important
    Release of containers for OSP 16.2.z director operator tech preview
    • Red Hat OpenStack Platform 16.2 rhosp-rhel8-tech-preview/osp-director-operator, rhosp-rhel8-tech-preview/osp-director-operator-bundle
  • RHSA-2022:6430 Released 2022-09-13 · Red Hat rating Moderate
    OpenShift API for Data Protection (OADP) 1.0.4 security and bug fix update
    • 8Base-OADP-1.0 oadp/oadp-kubevirt-velero-plugin-rhel8, oadp/oadp-mustgather-rhel8, oadp/oadp-operator-bundle +9
  • RHSA-2022:6429 Released 2022-09-13 · Red Hat rating Important
    Migration Toolkit for Containers (MTC) 1.7.4 security and bug fix update
    • 8Base-RHMTC-1.7 rhmtc/openshift-migration-controller-rhel8, rhmtc/openshift-migration-must-gather-rhel8, rhmtc/openshift-migration-registry-rhel8 +7
  • RHSA-2022:6262 Released 2022-09-09 · Red Hat rating Important
    OpenShift Container Platform 4.6.61 bug fix and security update
    • Red Hat OpenShift Container Platform 4.6 openshift4/ose-aws-ebs-csi-driver-rhel8, openshift4/ose-aws-ebs-csi-driver-rhel8-operator, openshift4/ose-aws-machine-controllers +47
  • RHSA-2022:6370 Released 2022-09-06 · Red Hat rating Moderate
    Red Hat Advanced Cluster Management 2.6.0 security updates and bug fixes
    • Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8 rhacm2/acm-governance-policy-addon-controller-rhel8, rhacm2/acm-grafana-rhel8, rhacm2/acm-must-gather-rhel8 +45
  • RHSA-2022:6344 Released 2022-09-06 · Red Hat rating Moderate
    Logging Subsystem 5.5.1 Security and Bug Fix Update
    • RHOL 5.5 for RHEL 8 openshift-logging/cluster-logging-rhel8-operator, openshift-logging/eventrouter-rhel8, openshift-logging/log-file-metric-exporter-rhel8 +1
  • RHSA-2022:6345 Released 2022-09-06 · Red Hat rating Moderate
    Multicluster Engine for Kubernetes 2.1 security updates and bug fixes
    • multicluster engine for Kubernetes 2.1 for RHEL 8 multicluster-engine/agent-service-rhel8, multicluster-engine/apiserver-network-proxy-rhel8, multicluster-engine/assisted-image-service-rhel8 +37
  • RHSA-2022:6347 Released 2022-09-06 · Red Hat rating Moderate
    VolSync 0.5 security fixes and updates
    • Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8 rhacm2/volsync-mover-rclone-rhel8, rhacm2/volsync-mover-restic-rhel8, rhacm2/volsync-mover-rsync-rhel8 +3
  • RHSA-2022:6348 Released 2022-09-06 · Red Hat rating Moderate
    Gatekeeper Operator v0.2 security and container updates
    • Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 rhacm2/gatekeeper-operator-bundle, rhacm2/gatekeeper-rhel8, rhacm2/gatekeeper-rhel8-operator
  • RHSA-2022:6183 Released 2022-09-06 · Red Hat rating Moderate
    Logging Subsystem 5.4.5 Security and Bug Fix Update
    • RHOL 5.4 for RHEL 8 openshift-logging/cluster-logging-rhel8-operator, openshift-logging/elasticsearch-proxy-rhel8, openshift-logging/elasticsearch-rhel8-operator +5
  • RHSA-2022:6182 Released 2022-09-06 · Red Hat rating Moderate
    Openshift Logging Security and Bug Fix update (5.3.11)
    • OpenShift Logging 5.3 openshift-logging/elasticsearch-proxy-rhel8, openshift-logging/elasticsearch-rhel8-operator
  • RHSA-2022:6346 Released 2022-09-06 · Red Hat rating Moderate
    RHSA: Submariner 0.13 - security and enhancement update
    • Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8 rhacm2/lighthouse-agent-rhel8, rhacm2/lighthouse-coredns-rhel8, rhacm2/nettest-rhel8 +7
  • RHSA-2022:6152 Released 2022-09-01 · Red Hat rating Important
    Secondary Scheduler Operator for Red Hat OpenShift 1.1.0 security update
    • OSSO 1.1 for RHEL 8 openshift-secondary-scheduler-operator/secondary-scheduler-operator-rhel8
  • RHSA-2022:6290 Released 2022-09-01 · Red Hat rating Moderate
    OpenShift API for Data Protection (OADP) 1.1.0 security and bug fix update
    • 8Base-OADP-1.1 oadp/oadp-kubevirt-velero-plugin-rhel8, oadp/oadp-mustgather-rhel8, oadp/oadp-rhel8-operator +8
  • RHSA-2022:6188 Released 2022-08-25 · Red Hat rating Important
    Node Maintenance Operator 4.11.1 security update
    • Node Maintenance Operator 4.11 for RHEL 8 workload-availability/node-maintenance-rhel8-operator
  • RHSA-2022:6187 Released 2022-08-25 · Red Hat rating Important
    Node Health Check Operator 0.3.1 security update
    • Node Healthcheck Operator 0.3 for RHEL 8 workload-availability/node-healthcheck-rhel8-operator
  • RHSA-2022:6184 Released 2022-08-25 · Red Hat rating Important
    Self Node Remediation Operator 0.4.1 security update
    • Self Node Remediation 0.4 for RHEL 8 workload-availability/self-node-remediation-must-gather-rhel8, workload-availability/self-node-remediation-operator-bundle, workload-availability/self-node-remediation-rhel8-operator
  • RHSA-2022:6103 Released 2022-08-23 · Red Hat rating Moderate
    OpenShift Container Platform 4.11.1 bug fix and security update
    • Red Hat OpenShift Container Platform 4.11 openshift4/cloud-network-config-controller-rhel8, openshift4/egress-router-cni-rhel8, openshift4/network-tools-rhel8 +47
  • RHSA-2022:6053 Released 2022-08-22 · Red Hat rating Moderate
    OpenShift Container Platform 4.7.56 security and bug fix update
    • Red Hat OpenShift Container Platform 4.7 openshift4/egress-router-cni-rhel8, openshift4/ose-aws-ebs-csi-driver-rhel8, openshift4/ose-aws-ebs-csi-driver-rhel8-operator +47
  • RHSA-2022:6051 Released 2022-08-18 · Red Hat rating Important
    Logging Subsystem 5.5.0 - Red Hat OpenShift security update
    • RHOL 5.5 for RHEL 8 openshift-logging/cluster-logging-rhel8-operator, openshift-logging/elasticsearch-proxy-rhel8, openshift-logging/elasticsearch-rhel8-operator +6
  • RHSA-2022:6113 Released 2022-08-18 · Red Hat rating Important
    Red Hat Application Interconnect 1.0 Release (rpms)
    • Red Hat Service Interconnect 1 skupper-cli-1.0.2-2.el8
  • RHSA-2022:6066 Released 2022-08-15 · Red Hat rating Important
    Red Hat OpenStack Platform 16.1 (etcd) security update
    • Red Hat OpenStack Platform 16.1 etcd-3.3.23-10.el8ost
  • RHSA-2022:6065 Released 2022-08-15 · Red Hat rating Important
    Red Hat OpenStack Platform 16.1 (collectd-libpod-stats) security update
    • Red Hat OpenStack Platform 16.1 collectd-libpod-stats-1.0.4-2.el8ost
  • RHSA-2022:6062 Released 2022-08-15 · Red Hat rating Important
    Red Hat OpenStack Platform 16.2 (collectd-libpod-stats) security update
    • Red Hat OpenStack Platform 16.2 collectd-libpod-stats-1.0.4-2.el8ost
  • RHSA-2022:6061 Released 2022-08-15 · Red Hat rating Important
    Red Hat OpenStack Platform 16.2 (etcd) security update
    • Red Hat OpenStack Platform 16.2 etcd-3.3.23-10.el8ost
  • RHSA-2022:6040 Released 2022-08-10 · Red Hat rating Important
    Release of OpenShift Serverless 1.24.0
    • Red Hat OpenShift Serverless 1.24 openshift-serverless-1-tech-preview/eventing-kafka-broker-controller-rhel8, openshift-serverless-1-tech-preview/eventing-kafka-broker-dispatcher-rhel8, openshift-serverless-1-tech-preview/eventing-kafka-broker-receiver-rhel8 +35
  • RHSA-2022:6042 Released 2022-08-10 · Red Hat rating Important
    Release of OpenShift Serverless Client kn 1.24.0
    • Red Hat OpenShift Serverless 1.0 openshift-serverless-clients-1.3.1-4.el8
  • RHSA-2022:5879 Released 2022-08-09 · Red Hat rating Important
    OpenShift Container Platform 4.9.45 bug fix and security update
    • Red Hat OpenShift Container Platform 4.9 openshift4/egress-router-cni-alt-rhel8, openshift4/egress-router-cni-rhel8, openshift4/network-tools-rhel8 +47
  • RHSA-2022:5875 Released 2022-08-09 · Red Hat rating Moderate
    OpenShift Container Platform 4.10.26 security update
    • Red Hat OpenShift Container Platform 4.10 openshift4/cloud-network-config-controller-rhel8, openshift4/egress-router-cni-rhel8, openshift4/network-tools-rhel8 +47
  • RHSA-2022:5924 Released 2022-08-08 · Red Hat rating Important
    Service Telemetry Framework 1.4 security update
    • Service Telemetry Framework 1.4 for RHEL 8 stf/prometheus-webhook-snmp, stf/service-telemetry-operator-bundle, stf/service-telemetry-rhel8-operator +4
  • RHSA-2022:5923 Released 2022-08-08 · Red Hat rating Important
    Service Telemetry Framework 1.3 security update
    • Service Telemetry Framework 1.3 for RHEL 8 stf/prometheus-webhook-snmp, stf/service-telemetry-operator-bundle, stf/service-telemetry-rhel8-operator +4
  • RHSA-2022:5866 Released 2022-08-02 · Red Hat rating Important
    go-toolset-1.17 and go-toolset-1.17-golang security and bug fix update
    • Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7) go-toolset-1.17-1.17.12-1.el7_9, go-toolset-1.17-build-1.17.12-1.el7_9, go-toolset-1.17-golang-1.17.12-1.el7_9 +8
  • RHSA-2022:5799 Released 2022-08-01 · Red Hat rating Important
    go-toolset and golang security and bug fix update
    • Red Hat Enterprise Linux AppStream (v. 9) go-toolset-1.17.12-1.el9_0, golang-1.17.12-1.el9_0, golang-bin-1.17.12-1.el9_0 +5
  • RHSA-2022:5775 Released 2022-08-01 · Red Hat rating Important
    go-toolset:rhel8 security and bug fix update
    • Red Hat Enterprise Linux AppStream (v. 8) delve-1.7.2-1.module+el8.6.0+12972+ebab5911.src::go-toolset:rhel8, delve-1.7.2-1.module+el8.6.0+12972+ebab5911.x86_64::go-toolset:rhel8, go-toolset-1.17.12-1.module+el8.6.0+16014+a372c00b.aarch64::go-toolset:rhel8 +18

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Migration Toolkit for VirtualizationAffectedNo fix yet
Node HealthCheck OperatorAffectedNo fix yet
Node Maintenance OperatorAffectedNo fix yet
OpenShift API for Data ProtectionAffectedNo fix yet
OpenShift Developer Tools and ServicesAffectedNo fix yet
OpenShift PipelinesAffectedNo fix yet
Red Hat 3scale API Management Platform 2AffectedNo fix planned: Will not fix
Red Hat Advanced Cluster Management for Kubernetes 2AffectedNo fix yet
Red Hat Ansible Automation Platform 2AffectedNo fix yet
Red Hat Ceph Storage 3AffectedNo fix planned: Out of support scope
Red Hat Ceph Storage 5AffectedNo fix yet
Red Hat Enterprise Linux 8AffectedNo fix yet
Red Hat Enterprise Linux 9AffectedNo fix yet
Red Hat OpenShift Container Platform 4AffectedNo fix yet
Red Hat OpenShift GitOpsAffectedNo fix yet
Red Hat OpenShift distributed tracing 2AffectedNo fix yet
Red Hat OpenShift on AWSAffectedNo fix yet
Red Hat Quay 3AffectedNo fix yet
Red Hat Storage 3AffectedNo fix yet
Red Hat Web TerminalAffectedNo fix yet
8Base-OADP-1.0Fixed RHSA-2022:6430
8Base-OADP-1.1Fixed RHSA-2022:6290
8Base-RHMTC-1.7Fixed RHSA-2022:6429
CNV 4.12 for RHEL 7Fixed RHSA-2023:0407
CNV 4.12 for RHEL 8Fixed RHSA-2023:0407, RHSA-2023:0408
Node Healthcheck Operator 0.3 for RHEL 8Fixed RHSA-2022:6187
Node Maintenance Operator 4.11 for RHEL 8Fixed RHSA-2022:6188
OSSO 1.1 for RHEL 8Fixed RHSA-2022:6152
OpenShift Custom Metrics Autoscaler 2Fixed RHSA-2023:1042
OpenShift Logging 5.3Fixed RHSA-2022:6182, RHSA-2022:6560
RHACS 3.72 for RHEL 8Fixed RHSA-2022:6714
RHOL 5.4 for RHEL 8Fixed RHSA-2022:6183
RHOL 5.5 for RHEL 8Fixed RHSA-2022:6051, RHSA-2022:6344
Red Hat Ceph Storage 6.1 ToolsFixed RHSA-2023:3642
Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)Fixed RHSA-2022:5866
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2022:5775, RHSA-2022:7519, RHSA-2022:7529, RHSA-2022:7648, RHSA-2023:2758, RHSA-2023:2802
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2022:5799, RHSA-2022:8057, RHSA-2022:8098, RHSA-2022:8250, RHSA-2024:2180
Red Hat OpenShift Container Platform 4.10Fixed RHSA-2022:5875
Red Hat OpenShift Container Platform 4.11Fixed RHSA-2022:6103
Red Hat OpenShift Container Platform 4.12Fixed RHSA-2022:7398, RHSA-2023:0727
Red Hat OpenShift Container Platform 4.6Fixed RHSA-2022:6262
Red Hat OpenShift Container Platform 4.7Fixed RHSA-2022:6053
Red Hat OpenShift Container Platform 4.8Fixed RHSA-2022:6308
Red Hat OpenShift Container Platform 4.9Fixed RHSA-2022:5879
Red Hat OpenShift Serverless 1.0Fixed RHSA-2022:6042
Red Hat OpenShift Serverless 1.24Fixed RHSA-2022:6040
Red Hat OpenStack Platform 16.1Fixed RHSA-2022:6065, RHSA-2022:6066
Red Hat OpenStack Platform 16.2Fixed RHSA-2022:6061, RHSA-2022:6062, RHSA-2022:6517
Red Hat Service Interconnect 1Fixed RHSA-2022:6113
Self Node Remediation 0.4 for RHEL 8Fixed RHSA-2022:6184
Service Telemetry Framework 1.3 for RHEL 8Fixed RHSA-2022:5923
Service Telemetry Framework 1.4 for RHEL 8Fixed RHSA-2022:5924
Service Telemetry Framework 1.5 for RHEL 8Fixed RHSA-2023:1529
Not affected: 30 products
  • 8Base-OADP-1.0
  • 8Base-OADP-1.1
  • 8Base-RHMTC-1.7
  • CNV 4.12 for RHEL 8
  • Ironic content for Red Hat OpenShift Container Platform 4.12
  • Node Healthcheck Operator 0.3 for RHEL 8
  • Node Maintenance Operator 4.11 for RHEL 8
  • OSSO 1.1 for RHEL 8
  • OpenShift Custom Metrics Autoscaler 2
  • OpenShift Developer Tools and Services
  • OpenShift Logging 5.3
  • RHACS 3.72 for RHEL 8
  • RHOL 5.4 for RHEL 8
  • RHOL 5.5 for RHEL 8
  • Red Hat Ceph Storage 6.1 Tools
  • Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)
  • Red Hat Enterprise Linux 8
  • Red Hat Enterprise Linux 9
  • Red Hat Enterprise Linux AppStream (v. 9)
  • Red Hat OpenShift Container Platform 4.10
  • Red Hat OpenShift Container Platform 4.11
  • Red Hat OpenShift Container Platform 4.12
  • Red Hat OpenShift Container Platform 4.6
  • Red Hat OpenShift Container Platform 4.7
  • Red Hat OpenShift Container Platform 4.8
  • Red Hat OpenShift Container Platform 4.9
  • Red Hat Openshift Data Foundation 4
  • Red Hat Openshift Sandboxed Containers
  • Red Hat Software Collections
  • Service Telemetry Framework 1.5 for RHEL 8

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-30631
  2. 2026-10-03 Alias added: GHSA-r654-8j96-crqx

References

Patch 2

Advisory 3

  • TI-2020-00578 Improper certificate validation in Microsoft Windows KEVCVSS 3.1HIGH 8.1
  • TI-2023-23979 The HTTP/2 protocol allows a denial of service (server resource consumption) because… KEVCVSS 3.1HIGH 7.5
  • TI-2018-05208 The "go get" implementation in Go 1.9.4, when the -insecure command-line option is used… CVSS 3.1HIGH 8.8
  • TI-2018-12083 Improper input validation in [UNKNOWN] golang CVSS 3.1HIGH 8.1
  • TI-2024-16306 Mishandling of corrupt central directory record in archive/zip CVSS 3.1MEDIUM 5.5
  • TI-2021-15910 Go before 1.16.9 and 1.17.x before 1.17.2 has a Buffer Overflow via large arguments in a… CVSS 3.1CRITICAL 9.8
See all 170 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences